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DETAILED ACTION 

A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .1 7(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 
1 .17(e) has been timely paid, the finality of the previous Office action has been 
withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 9/23/01 has been 
entered. 

Examiner Amendment 

An Examiner's Amendment to the record appears below. Should the changes and/or 
additions be unacceptable to Applicant, an amendment may be filed as provided by 37 
CFR 1 .31 2. To ensure consideration of such an amendment, it MUST be submitted no 
later than the payment of the Issue Fee. 

The following changes were authorized by Joseph Lally in a telephone interview on 
12/13/10. 

Please cancel claim 4 and replace claims 1 , 3, 14, 24-25 and 74 as follows: 
1 . A method for secure communication comprising: 

receiving a first profile from a first entity, the first profile indicating electronic commerce 
information, including a first document exchange protocol, pertaining to the first entity; 

receiving a second profile from a second entity, the second profile indicating electronic 
commerce information, including a second document exchange protocol, pertaining to the 



Application/Control Number: 10/040,573 Page 3 

Art Unit: 2434 

second entity; 

automatically generating an agreement based on the first profile and the second profile, 
wherein the agreement includes information pertaining to electronic commerce transactions 
between the first and second entities; 

generating a first virtual private proxy and a second virtual private proxy; 

establishing a first secure connection between the first virtual private proxy and the first 
entity and establishing a second secure connection between the second virtual private proxy 
and the second entity; 

establishing a logical connection between the first virtual private proxy and the second 
virtual private proxy; 

monitoring data at at least one of the first virtual private proxy and the second virtual 
private proxy; 

determining whether monitored data violates the agreement; and 
disallowing communication of the monitored data between the first virtual private proxy 
and the second virtual private proxy when the data violates the agreement; 

wherein establishing the first secure connection includes establishing a 
secure connection with a private session manager of the first entity wherein said 
private session manager excludes all other remote connections to the first entity . 

3. The method for secure communication according to Claim 2, , wherein the 
security violation is selected from the group cons i st i ng of comprising : a virus, a 
malicious program, and an intrusion attempt. 



14. 



A system for secure communication comprising: 
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l og i c a processor having access to processor executable instructions, stored 
on a memory medium! and conf i gured the instructions including instructions to: 

receive a first profile from a first entity, the first profile indicating electronic 
commerce information, including a first document exchange protocol, pertaining to the first 
entity; 

receive a second profile from a second entity, the second profile indicating 
electronic commerce information, including a second document exchange protocol, pertaining 
to the second entity; 

automatically generate an agreement based on the first profile and the second 
profile, wherein the agreement includes information pertaining to electronic commerce 
transactions between the first and second entities; 

generate a first virtual private proxy and a second virtual private proxy; 

establish a first secure communication between the first virtual private proxy 
and the first entity and establish a second secure connection between the second virtual 
private proxy and the second entity; 

establish a logical connection between the first virtual private proxy and the 
second virtual private proxy; 

monitor data at at least one of the first virtual private proxy and the second 
virtual private proxy; 

determine whether the data violates the agreement; and 

disallow communication of the data from the first virtual private proxy to the 
second virtual private proxy when the data violates the agreement.; 

wherein the instructions to establish the first secure connection 
include instructions to establish a secure connection with a private session 
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manager of the first entity wherein said private session manager excludes all other 
remote connections to the first entity. 

24. The system for secure communication according to Claim 14, wherein the 
l og i c i n d e t e rm i n i ng instructions to determine whether the data violates the agreement 
determiners]] whether the data includes an intrusion attempt. 



25. The system for secure communication according to Claim 14, wherein the 
l og i c i n d e t e rm i n i ng instructions to determine whether the data violates the agreement 
determiners]] whether the data includes a virus or malicious program. 



74. A non-transitory computer readable medium, including a computer program, 
executable by a processor, for: 

receiving a first profile from a first entity, the first profile indicating electronic commerce 
information, including a first document exchange protocol, pertaining to the first entity; 

receiving a second profile from a second entity, the second profile indicating electronic 
commerce information, including a second document exchange protocol, pertaining to the 
second entity; 

automatically generating an agreement based on the first profile and the second profile, 
wherein the agreement includes information pertaining to electronic commerce transactions 
between the first and second entities; 

generating a first virtual private proxy and a second virtual private proxy; 

establishing a first secure connection between the first virtual private proxy and the first 
entity and establishing a second secure connection between the second virtual private proxy 
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and the second entity; 

establishing a logical connection between the first virtual private proxy and the second 
virtual private proxy; 

monitoring data at at least one of the first virtual private proxy and the second virtual 
private proxy; 

determining whether monitored data violates the agreement; and 
disallowing communication of the monitored data between the first virtual private proxy 
and the second virtual private proxy when the data violates the agreement^ 

wherein establishing the first secure connection includes establishing a 
secure connection with a private session manager of the first entity wherein said 
private session manager excludes all other remote connections to the first entity . 



Allowed Claims 

In light of applicant's amendments and the examiner amendment authorized by 
applicant's representative claims 1-3, 5, 8-10, 14, 22-25 and 74-79 are allowed. 

The following is a statement of reasons for the indication of allowable subject matter. 

Applicant invention is directed to automatically generating an agreement based on 
entities profiles, generating virtual proxies and a secure connection between the proxies 
and entities, and a logical connection between the proxies, monitoring data at least one 
of the proxy and disallowing communication of the monitored data when the data 
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violates the agreement, wherein establishing the first secure connection includes 
establishing a secure connection with a private session manager of the first entity 
excluding all other remote connections to the first entity. 

The closest prior art Dan 290 (USPN 6148290) discloses automatically generating an 
agreement based on the first profile and the second profile, wherein the agreement 
includes information pertaining to electronic commerce transactions between the first 
and second entities; generating a first virtual private proxy and a second virtual private 
proxy; establishing a first secure connection between the first virtual private proxy and 
the first entity and establishing a second secure connection between the second virtual 
private proxy and the second entity; and establishing a logical connection between the 
first virtual private proxy and the second virtual private proxy. Another relevant prior art 
Dan 1 03 (USPUB 2002/01 781 03) discloses monitoring data at received at the first 
virtual private proxy from the first entity and determining whether the monitored data 
between the first virtual proxy and the second virtual proxy violates the agreement and 
Odom (USPN 6058379) teaches disallowing communication of the monitored data 
between the communicating parties when violation is detected. However, none of these 
references teach at least that establishing of the first secure connection includes 
establishing a secure connection with a private session manager of the first entity 
wherein said private session manager excludes all other remote connections to the first 
entity as required by the independent claims 1,14 and 74. 
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The prior art, fails to anticipate or fairly suggest the limitation of applicant's 
independent claims, in such a manner that a rejection under 35 U.S.C. 1 02 or 1 03 
would be proper. As a result the claimed invention is considered to be in condition for 
allowance as being novel and non-obvious over prior art. 

Any comments considered necessary by applicant must be submitted no later than 
the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
statement of Reasons for Allowance". 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peter Poltorak whose telephone number is (571) 272- 
3840. The examiner can normally be reached from Monday through Thursday from 
9:00 until 5:00, and every other Friday from 9:00 until 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571) 272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is (571) 273-8300. 
Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the Group receptionist whose telephone number is (571) 272- 
1600. 
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